Not rated
CVE-2018-0491 A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10
Description
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) because the KIST implementation allows a channel to be added more than once in the pending list.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tor | Versions not published |
Other CVEs of Tor
The 4 CVEs of Tor →
CVE-2025-4444
A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17
6.3
Medium
CVE-2018-0490
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10
Not rated
CVE-2017-0377
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's…
Not rated